Re:Is Sudo Almost Useless?
by parliament32 on Tuesday June 09, 2020 @03:03PM
(#23469644)
But an unprivileged user can't do any of that. The entire point of unix permissions is so you can't mess with other users' files unless you've explicitly been granted permission. File owned by, say, mysql are owned by a separate "mysql" user by default.
Re:Is Sudo Almost Useless?
by mywittyname on Wednesday June 10, 2020 @09:26AM
(#23476731)
If there are readable configuration file sitting around, then it's totally possible to get the credential for other systems. I see this stuff all the time and have leveraged t his fact for troubleshooting systems that I'm unfamiliar with.
Re:Is Sudo Almost Useless?
by dependenttypes on Tuesday June 09, 2020 @03:16PM
(#23469786)
> theft
You can't steal data unless if you intentionally delete the original after copying, but then that is not really theft as any proper organisation will have backups.
Re:Is Sudo Almost Useless?
by Sohcahtoa82 on Tuesday June 09, 2020 @08:18PM
(#23472523)
You know what is meant. This kind of pedantry doesn't add to the conversation.
"Theft" is a nice easy word for making a copy of data that you do not have permission to access.
So someone steals a book from a library isn’t theft because they have secondary copies?
Re:Is Sudo Almost Useless?
by 0_gravitas on Tuesday June 09, 2020 @06:25PM
(#23471647)
A better analogy would be photocopying all the contents of one of the books and putting it back on the shelf
I have access to this box and it has granted me access to some other system which has useful data, like a database, NFS mount, or S3 bucket. Let me hop in here and grep for something juicy to steal, maybe flip some bits around to fuck with people, or just delete shit.